pyrox.dev
lol
kdePackages.kwin: apply lowering CAP_SYS_NICE patch
This patch exists on plasma5Packages.kwin and is still applicable for
KDE6.
+40
pkgs/kde/plasma/kwin/0001-Lower-CAP_SYS_NICE-from-the-ambient-set.patch
+40
pkgs/kde/plasma/kwin/0001-Lower-CAP_SYS_NICE-from-the-ambient-set.patch
···
···
1
+
From 232e480ab1303f37d37d295b57fdcbb6b6648bca Mon Sep 17 00:00:00 2001
2
+
From: Alois Wohlschlager <alois1@gmx-topmail.de>
3
+
Date: Sun, 7 Aug 2022 16:12:31 +0200
4
+
Subject: [PATCH] Lower CAP_SYS_NICE from the ambient set
5
+
6
+
The capabilities wrapper raises CAP_SYS_NICE into the ambient set so it
7
+
is inherited by the wrapped program. However, we don't want it to leak
8
+
into the entire desktop environment.
9
+
10
+
Lower the capability again at startup so that the kernel will clear it
11
+
on exec.
12
+
---
13
+
src/main_wayland.cpp | 3 +++
14
+
1 file changed, 3 insertions(+)
15
+
16
+
diff --git a/src/main_wayland.cpp b/src/main_wayland.cpp
17
+
index 1720e14e7..f2bb446b0 100644
18
+
--- a/src/main_wayland.cpp
19
+
+++ b/src/main_wayland.cpp
20
+
@@ -39,7 +39,9 @@
21
+
#include <QWindow>
22
+
#include <qplatformdefs.h>
23
+
24
+
+#include <linux/capability.h>
25
+
#include <sched.h>
26
+
+#include <sys/prctl.h>
27
+
#include <sys/resource.h>
28
+
29
+
#include <iomanip>
30
+
@@ -285,6 +287,7 @@ static QString automaticBackendSelection()
31
+
32
+
int main(int argc, char *argv[])
33
+
{
34
+
+ prctl(PR_CAP_AMBIENT, PR_CAP_AMBIENT_LOWER, CAP_SYS_NICE, 0, 0);
35
+
KWin::Application::setupMalloc();
36
+
KWin::Application::setupLocalizedString();
37
+
KWin::gainRealTime();
38
+
--
39
+
2.37.1
40
+
+1
pkgs/kde/plasma/kwin/default.nix
+1
pkgs/kde/plasma/kwin/default.nix